7be0354f962a28ec09883d01551e286c

Sharing

Copy URL Twitter E-mail

General

Target

7be0354f962a28ec09883d01551e286c
Size

290KB
MD5

7be0354f962a28ec09883d01551e286c
SHA1

01e52c3521d650d40d0cac3e049d7a86da87dacc
SHA256

6902bb662e0760ee33187311f28c40f3069869c9757fa3ba364c11adf0d3c454
SHA512

c17eaaca18726b9c83cea58db7a61ca8735f768be2d3e8c98255ebdd44dedd00f7643f8aa7f4243e1fd65e36de31ce2ca0818da50030029ef7ce50216787752c
SSDEEP

6144:QhmnbchdqfLBHEXJYsnhxFh2Z/uDn9U5wny+ExrtCt/3oAN:kaWqBHEXJYoFUA9UC0t0b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7be0354f962a28ec09883d01551e286c

Files

7be0354f962a28ec09883d01551e286c
.exe windows:4 windows x86 arch:x86

44dbf2c22bc461b7ef6bb63629830706

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefDlgProcA
CascadeWindows
EndDeferWindowPos
GetDlgItem

ole32

OleDraw
CoMarshalHresult
CoRegisterClassObject
RevokeDragDrop

oledlg

ord5
ord1
ord9

comctl32

UninitializeFlatSB
ord6

advapi32

RegNotifyChangeKeyValue
RegRestoreKeyA
RegQueryMultipleValuesA
RegSetValueExA

kernel32

VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
LoadLibraryA
LCMapStringA
HeapReAlloc
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapAlloc
GetEnvironmentStringsW
CopyFileA
GetModuleHandleA
GetProcAddress
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wwj
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xsvi
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

44dbf2c22bc461b7ef6bb63629830706

Headers

File Characteristics

Imports

user32

ole32

oledlg

comctl32

advapi32

kernel32

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 92KB

wwj Size: 284KB - Virtual size: 283KB

xsvi Size: 109KB - Virtual size: 109KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 92KB

wwj
Size: 284KB - Virtual size: 283KB

xsvi
Size: 109KB - Virtual size: 109KB

.rsrc
Size: 5KB - Virtual size: 5KB